Exabeam
Exabeam sells SIEM and behavior analytics software that security teams use to spot threats in log data.
Exabeam still holds a real customer base and Gartner Leader status, but headcount is shrinking, revenue figures are murky, and Microsoft is closing in from the top of the market.
Exabeam sells software that watches computer networks for security threats and helps companies follow rules. It has real advantages: thousands of customers use it, it works with older systems, and switching away is painful because it stores a lot of company-specific setup. However, Microsoft is attacking hard with a product called Sentinel that does similar work and comes free or cheap as part of packages companies already buy, and it is officially ranked as a leader by the industry's main scorekeeper. At the same time, Exabeam itself is building new AI tools that might make its old products less valuable. The company has also cut its staff in half since 2023, which signals shrinkage. What matters most: whether Microsoft keeps gaining customers from Exabeam, and whether the company's owner, Thoma Bravo, tries to sell it to someone else.
Further headcount cuts or stabilization at Exabeam through 2026. Indicates whether the business is shrinking further or finding footing.
Any announcement of a Thoma Bravo sale or IPO filing for Exabeam. Would show whether the PE owner is exiting via acquisition rather than growth.
- Headcount fell 43.8%, from 1,406 to 827
- Job postings dropped 46.6% year over year
- Revenue estimates range from $52M to $222M
- Revenue is unverified and estimates range from $25M to $222M, undermining credibility of growth narrative.
- Headcount down 43.8% since 2023 with job postings falling 46.6% in 2025, signaling contraction not growth.
- Microsoft Sentinel's near-zero-cost bundling into E5/Defender directly undercuts Exabeam's core pricing model.
- Nova and rival agentic AI tools automate the Tier-1/2 analyst workflows Exabeam's business is built on.
- Thoma Bravo's PE ownership structure typically pursues strategic sale over long-term equity growth for employees.
| Rival | Direction | Evidence |
|---|---|---|
| Microsoft Sentinel | losing to | Sentinel named Gartner SIEM Leader Oct 16, 2025, rising fastest in execution, bundled into E5 at near-zero cost |
| Splunk (Cisco) | contesting | Cited alongside Microsoft and IBM as dominating the SIEM Gartner Magic Quadrant as of July 2026 |
| IBM QRadar | contesting | QRadar SaaS assets reportedly acquired by Palo Alto Networks, reshaping SIEM competitive field, 2026 |
| Exaforce | losing to | Agentic SOC-native entrant positioning itself as a category replacement for SIEM as of June 2026 |
| Google Chronicle | contesting | Named as encroaching hyperscaler platform in SIEM/SecOps space, 2026 competitor listings |
- Is Exabeam profitable in 2026?
- No audited financials are public. Third-party revenue estimates range wildly from about $25M to $222M as of mid-2026 (Latka $96.5M, ZoomInfo $176.7M, StartupHub $102.9M), making profitability unverifiable from public data as of July 2026.
- Who owns Exabeam now?
- Private equity firm Thoma Bravo has majority-owned Exabeam since its July 17, 2024 merger with LogRhythm (which Thoma Bravo had acquired in 2018). No IPO or sale has been confirmed as of July 2026.
- Has Exabeam had layoffs?
- Yes. Exabeam cut about 20% of staff (134 positions) in October 2023, then saw further merger-related cuts in July 2024 including a WARN notice for 43 San Mateo workers. Headcount fell from 1,406 in 2023 to 827 by December 2025, a 43.8% decline.
- Could Microsoft Sentinel replace Exabeam?
- Microsoft Sentinel was named a Gartner SIEM Leader on October 16, 2025 and is reportedly rising fastest in execution ranking while bundling SOC/AI into the Defender plus E5 stack at near-zero incremental cost, directly pressuring Exabeam's core seat-based analyst business.
- What is Exabeam's biggest competitor?
- Microsoft Sentinel is Exabeam's most cited threat, named a Gartner SIEM Leader on October 16, 2025 and rising in execution ranking; other rivals include Splunk (now Cisco-owned), Google Chronicle, IBM QRadar, Securonix, and agentic-native entrant Exaforce.
- Will Exabeam go public?
- No confirmed IPO timeline exists as of July 2026. Market commentary (May 27, 2026) says Thoma Bravo could pursue either an IPO or a strategic sale as an exit, with the last disclosed standalone valuation at $2.4B in June 2021.
- 2025-10-08Pete Harteveld becomes CEO, succeeding retiring Chris O'Malley
- 2025-10Exabeam adds Nova Advisor Agent for CISO peer benchmarking
- 2025-07Nova expands to six specialized agents covering full TDIR lifecycle
- 2025-04-01Exabeam launches Nova, multi-agent agentic AI for security operations
- 2024-09-15WARN notice filed for 43 laid-off workers in San Mateo, CA
- 2024-07-17Exabeam and LogRhythm complete merger under Thoma Bravo ownership
- 2023-10Exabeam lays off about 20% of staff (134 positions)
- 2021-06-01Exabeam raises $200M Series F at $2.4B valuation
- 2025 Gartner® Magic Quadrant™ for SIEM (2025-10-15)
- Microsoft named a Leader in the 2025 Gartner Magic Quadrant for SIEM (2025-10-16)
- Microsoft, IBM, Splunk Dominate SIEM Gartner Magic Quadrant (2026-07-01)
- Exabeam To Lay Off 20 Percent Of Workforce
- Merged Exabeam and LogRhythm cut jobs, face lawsuit (2024-07-18)
- Exabeam Number of Employees 2026 (2026-06-29)
- $96.5M Est. ARR, $289.4M Valuation (2025-09-17)
- Exabeam - Overview, News & Similar companies (2026-06-17)
- Exabeam - $390M Raised - Reviews & Alternatives (2026-07-20)
- Exabeam - Headcount, Funding & Open Jobs (2026-06-28)
- Exabeam Nova Unleashes the Future of Agentic AI in Cybersecurity (2025-04-01)
- What's New in July 2025 (2025-05-26)